Display the totp secret string without otpauth:// on enroll page

Question
1

hi community,

i would like to display the “secret” (in my example RRKKLHID4FOAGGMS2MCET2GSN6KUL3F1) on the totp enroll page next to the qr-code additionally

i can only find the variable “enrolledToken.googleurl.value”
…and it looks like this:
otpauth://totp/TOTP0004C29B?secret=RRKKLHID4FOAGGMS2MCET2GSN6KUL3F1&period=30&digits=6&issuer=privacyIDEA

very thanks for your tips

:slight_smile:

2

i found it:

.privacyidea/lib/python3.8/site-packages/privacyidea/static/components/token/views/token.enrolled.totp.html

in block div class=col-sm-12
add the follow:

The secret code for your authenticator app: {{ enrolledToken.otpkey.value_b32 }}

thanks anyway and greetings
:slight_smile:

3

Thanks for looking into this.
Please be aware, that in place modified templates could be overwritten during an upate.

So see the customization, that uses rewrite mechanisms of the webserver to avcoid overwriting:
https://privacyidea.readthedocs.io/en/v3.7/faq/customization.html#templates

4

Just for the record, You can also use the webui policy show_seed:
https://privacyidea.readthedocs.io/en/latest/policies/webui.html#show-seed

1 Like